Name:        "applicationUID.Analyzer",
		Description: "Checks invalid application UID",
		Inputs: []config.GroupVersionKind{
			gvk.Pod,
			gvk.Deployment,
		},
	}
}

func (appUID *ApplicationUIDAnalyzer) Analyze(context analysis.Context) {
	context.ForEach(gvk.Pod, func(resource *resource.Instance) bool {
		appUID.analyzeAppUIDForPod(resource, context)
		return true
	})

func (pc *PodCache) onEvent(_, pod *v1.Pod, ev model.Event) error {
	ip := pod.Status.PodIP
	// PodIP will be empty when pod is just created, but before the IP is assigned
	// via UpdateStatus.
	if len(ip) == 0 {
		return nil
	}

	key := config.NamespacedName(pod)
	switch ev {
	case model.EventAdd:
		if shouldPodBeInEndpoints(pod) && IsPodReady(pod) {
			pc.addPod(pod, ip, key)
		} else {
			return nil

apiVersion: v1
kind: Pod
metadata:
  name: test-pod
  labels:
    name: test-pod-applied
spec:
  containers:
  - name: kubernetes-pause

apiVersion: v1
kind: Pod
metadata:
  name: test-pod
  labels:
    name: test-pod-label
spec:
  containers:
  - name: kubernetes-pause

apiVersion: v1
kind: Pod
metadata:
  name: test
spec:
  containers:
  - name:

apiVersion: v1
kind: Pod
metadata:
  name: env-test-pod
spec:
  containers:
    - name: test-container
      image: registry.k8s.io/busybox
      command: [ "/bin/sh", "-c", "env" ]
      env:
        - name: TEST_CMD_1
          valueFrom:
            secretKeyRef:
              name: test-secret
              key: key-1
        - name: TEST_CMD_2
          valueFrom:
            configMapKeyRef:

apiVersion: v1
kind: Pod
metadata:
  name: selector-test-pod
  labels:
    name: selector-test-pod
    unique-label: bingbang
spec:
  containers:
  - name: kubernetes-pause

apiVersion: v1
kind: Pod
metadata:
  name: selector-test-pod-dont-apply
  labels:
    name: selector-test-pod-dont-apply
    unique-label: biz
spec:
  containers:
  - name: kubernetes-pause

{
  "apiVersion": "v1",
  "kind": "Pod",
  "metadata": {
    "name": "pod-with-precision"
  },
  "spec": {
    "activeDeadlineSeconds": 2147483647,
    "containers": [
      {
        "name": "kubernetes-pause",
        "image": "registry.k8s.io/pause:3.10"
      }
    ],
    "restartPolicy": "Never",
    "securityContext": {
      "supplementalGroups": [
        0,
        1000030003,
        2147483647
      ]

apiVersion: v1
kind: Pod
metadata:
  name: pod-sec-uid
  labels:
    app: helloworld
    version: v2
spec:
  securityContext:
    runAsUser: 1337
  containers:
  - name: helloworld
    image: docker.io/istio/examples-helloworld-v2
    resources:
      requests:
        cpu: "100m"
    imagePullPolicy: IfNotPresent #Always
    ports: